The Agent Skills Directory

[SAFE]: The skill implements a decorative theming engine for the OpenAI Codex desktop application. It operates by injecting CSS and assets through the Chromium DevTools Protocol (CDP).\n- [COMMAND_EXECUTION]: The skill utilizes local shell scripts (Bash on macOS and PowerShell on Windows) to launch the Codex application with remote debugging enabled and to manage a background injector process. These operations are restricted to local executables and the skill's own scripts.\n- [DATA_EXFILTRATION]: No evidence of data exfiltration was found. Network operations are limited to communicating with the local CDP interface at 127.0.0.1 and querying local application state.\n- [DYNAMIC_EXECUTION]: The skill uses CDP to evaluate JavaScript within the Codex application's context. This is the core mechanism for applying themes. The injected code is constructed from local source files (assets/renderer-inject.js) and theme manifests. The skill explicitly rejects themes containing remote CSS resources (@import or external url()), mitigating risks of indirect prompt injection or unauthorized resource loading.\n- [SAFE]: Configuration modifications are limited to the user's local Codex settings (~/.codex/config.toml). The skill creates backups before editing and only modifies specific appearance-related keys.

codedrobe-codex-theme